Supply chain β›“ Supply Chain

United Healthcare, Aetna Life Insurance Company (CVS Health) and 46 more Third-Party Breach (July 2025)

πŸ“… 2025-07-01 🏒 Kelly & Associates Insurance Group
Primary Source β†—

Incident Details

Kelly Benefits says 2024 data breach impacts 550,000 customers. Kelly & Associates Insurance Group (dba Kelly Benefits) is informing more than half a million people of a data breach that compromised their personal information. The Maryland-based health and life insurance agency has issued an update on a security incident it suffered last year between December 12-17, when unauthorized actors breached its IT systems and stole files. On April 9, 2025, the company stated that the incident impacted 32,234 individuals. The figure was revised multiple times until the final tally shared with authorities in the U.S. counted 553,660 individuals. Third-party company: Kelly & Associates Insurance Group.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Kelly & Associates Insurance Group
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2025-07-01 Breach occurred
  2. 2025-07-01 Publicly disclosed